Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 646 respecto a la semana anterior

Críticas / altas1266▼ 292 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)250▼ 252 respecto a la semana anterior

402.962 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-39746	Aplazada	Crítica (9.3)	0.38%	—	Fs-code Booknetic^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
CVE-2026-39745	Aplazada	Alta (7.1)	0.24%	—	Bestwebsoft Contact Form TO DB^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
CVE-2026-39731	Aplazada	Alta (7.1)	0.24%	—	Database FOR CF7^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
CVE-2026-39730	Aplazada	Alta (7.1)	0.31%	—	Wise Chat^AI	6/10/2026	7/10/2026	Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.
CVE-2026-39729	Aplazada	Alta (7.2)	0.34%	—	Edwiser Bridge^AI	6/10/2026	6/10/2026	Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
CVE-2026-39728	Aplazada	Alta (7.2)	0.26%	—	Instapage^AI	6/10/2026	6/10/2026	Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
CVE-2026-39727	Aplazada	Media (6.5)	0.21%	—	WC Fields Factory^AI	6/10/2026	6/10/2026	Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.
CVE-2026-39726	Aplazada	Alta (7.1)	0.24%	—	Prestalife Product Designer^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.
CVE-2026-39725	Aplazada	Alta (8.8)	0.74%	—	Elegantthemes Divi^AI	6/10/2026	6/10/2026	Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.
CVE-2026-39724	Aplazada	Alta (7.1)	0.24%	—	Http Requests Manager^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.
CVE-2026-39722	Aplazada	Alta (7.1)	0.24%	—	Wplms^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
CVE-2026-39720	Aplazada	Alta (7.1)	0.24%	—	Mapster WP Maps^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
CVE-2026-39719	Aplazada	Alta (7.2)	0.26%	—	PDF Smart Viewer^AI	6/10/2026	6/10/2026	Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
CVE-2026-32581	Aplazada	Alta (7.1)	0.27%	—	Mooberry Book Manager^AI	6/10/2026	6/10/2026	Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
CVE-2026-32580	Aplazada	Alta (7.5)	0.31%	—	Woocommerce Lottery^AI	6/10/2026	6/10/2026	Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.
CVE-2026-32579	Aplazada	Crítica (10)	0.49%	—	Kognetiks Chatbot^AI	6/10/2026	6/10/2026	Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.
CVE-2026-32578	Aplazada	Alta (7.1)	0.31%	—	Ecpay Ecommerce^AI	6/10/2026	6/10/2026	Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
CVE-2026-32577	Aplazada	Alta (7.1)	0.24%	—	Najeebmedia Frontend File Manager^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
CVE-2026-32575	Aplazada	Alta (7.1)	0.24%	—	Sumo Affiliates PRO^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
CVE-2026-32574	Aplazada	Alta (7.1)	0.24%	—	Rednao Smart Forms^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.
CVE-2026-32572	Aplazada	Alta (7.1)	0.24%	—	Wedevs WP User Frontend^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
CVE-2026-32571	Aplazada	Media (6.5)	0.21%	—	Ohio Extra^AI	6/10/2026	6/10/2026	Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
CVE-2026-32570	Aplazada	Alta (7.1)	0.24%	—	Progressify^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
CVE-2026-32569	Aplazada	Alta (7.1)	0.24%	—	Joomunited WP Media Folder^AI	6/10/2026	6/10/2026	Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
CVE-2026-32568	Aplazada	Crítica (9.9)	0.74%	—	Woocommerce Designer PRO^AI	6/10/2026	6/10/2026	Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.